A county SOC wants CloudWatch alarms and EventBridge security events from every workload account to land in one security and operations account so on-call can respond from a single place. Which multi-account notification strategy best meets that need?
Select an answer to reveal the explanation.
Short Explanation
Think of every department fire alarm still ringing in its own closet — useless for a night watch that needs one board. Pipe CloudWatch and EventBridge signals from all accounts into the security/ops account so on-call sees one panel, not fifty logins.
Full Explanation
SAP-C02 Task 1.4 expects centralized multi-account event and logging notification patterns. Cross-account EventBridge rules or targets and CloudWatch alarm actions that deliver into a dedicated security or operations account give operators a single response plane. Isolated per-account SNS without aggregation forces console hopping and slows incident response. Public webhooks and ungoverned email sprays lack organizational control and auditability.